Introduction

Civasure (“we,” “our,” or “us”) operates the Civasure mobile application and web dashboard. This Privacy Policy explains how we collect, use, and protect information when you use our services.

We are committed to protecting individual privacy. Anonymity is a core product value, not a feature that can be toggled off.

Information We Collect

Mobile App (Survey Respondents)

The Civasure mobile app is anonymous by design:

No user accounts. You are never asked to create an account, provide your name, email, or any personally identifiable information.
Survey responses. We collect your answers to disaster preparedness questions. These responses are associated only with a ZIP code, never with your identity.
Device identifier. A randomly generated device ID is stored locally on your device solely to allow you to update a previously submitted survey response. This identifier is never shared with our customers, used for tracking, or linked to your identity.
Push notification token. If you opt in to push notifications, we store a notification token associated with your ZIP code. This token is stored separately from survey responses and cannot be used to identify you or link back to your survey answers.

We do not collect: names, email addresses, phone numbers, precise location data, IP addresses for identification, or any other personally identifiable information from mobile app users.

Web Dashboard (Emergency Managers)

For authorized emergency management personnel who use our web dashboard:

Account information. Name, email address, and organizational affiliation, managed through our authentication provider (Stytch).
Usage data. Standard web analytics to improve the dashboard experience.

How We Use Information

Survey data is used exclusively in aggregate form to help emergency management organizations understand community-level disaster preparedness. Individual responses are never exposed to any customer or third party.
Dashboard account data is used to authenticate users and associate them with their organization.
Push notification tokens are used to deliver relevant preparedness information to communities within an organization’s geographic area.

Government customers receive only aggregate, anonymized data scoped to their geographic area. They cannot identify individual respondents.
We do not sell personal data. We do not share, sell, or rent individual-level data to any third party.
Service providers. We use the following third-party services to operate our platform:
- Amazon Web Services (AWS): cloud infrastructure and data storage
- Stytch: authentication for dashboard users
- Anthropic: AI-powered analysis of aggregate data

Data Security

We implement appropriate technical and organizational measures to protect the data we process, including encryption in transit and at rest, access controls, and regular security reviews.

Data Retention

Survey responses are retained as long as needed to provide aggregate analysis to emergency management organizations.
Dashboard account data is retained for the duration of the organization’s subscription.
You may request deletion of your data by contacting us.

Children’s Privacy

Our services are not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us with information, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify dashboard users of material changes via email. The “Last updated” date at the top of this page indicates when the policy was last revised.

Contact Us

If you have questions about this Privacy Policy, please contact us at:

Email: hello@civasure.com